Update image kyverno to v3.3.3

kubernetes/apps/default/sabnzbd/app/helmrelease.yaml

@@ -75,12 +75,9 @@ spec:
               allowPrivilegeEscalation: false
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
-            resources:
-              requests:
-                cpu: 100m
-              limits:
-                memory: 16Gi
     defaultPodOptions:
+      nodeSelector: # ~~testing~~
+        kubernetes.io/hostname: gandalf-01
       securityContext:
         runAsNonRoot: true
         runAsUser: 568

kubernetes/apps/observability/grafana/app/helmrelease.yaml

@@ -196,9 +196,6 @@ spec:
         cert-manager:
           url: https://gitlab.com/uneeq-oss/cert-manager-mixin/-/raw/master/dashboards/cert-manager.json?ref_type=heads
           datasource: Prometheus
-        dcgm-exporter:
-          url: https://raw.githubusercontent.com/NVIDIA/dcgm-exporter/main/grafana/dcgm-exporter-dashboard.json
-          datasource: Prometheus
         external-secrets:
           url: https://raw.githubusercontent.com/external-secrets/external-secrets/main/docs/snippets/dashboard.json
           datasource: Prometheus

kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml

@@ -66,15 +66,9 @@ spec:
               capabilities:
                 drop:
                   - ALL
-            resources:
-              requests:
-                cpu: 100m
-                memory: 1024Mi
-              limits:
-                memory: 8Gi
     defaultPodOptions:
       nodeSelector: # ~~testing~~
-        kubernetes.io/hostname: shadowfax-01
+        kubernetes.io/hostname: gandalf-01
       securityContext:
         runAsNonRoot: true
         runAsUser: 568

shell.nix

@@ -15,8 +15,6 @@ pkgs.mkShell {
     gitleaks
     helmfile
     k9s
-    krew
-    kubectl
     kubevirt
     kubernetes-helm
     pre-commit
@@ -25,5 +23,6 @@ pkgs.mkShell {
     mqttui
     kustomize
     yq-go
+    go-task
   ];
 }